Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/JWrRly6kqKcEPtrPDZKJkVG9ZbQ.roa
File:                     JWrRly6kqKcEPtrPDZKJkVG9ZbQ.roa (raw, json)
Hash identifier:          jW708zNdZ7Eb+fv49uxsb8lXifVt82yjzp5/8oVHrvk=
Subject key identifier:   25:6A:D1:97:2E:A4:A8:A7:04:3E:DA:CF:0D:92:89:91:51:BD:65:B4
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142EEA70708FD9B419E02B8D622C9E6
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/JWrRly6kqKcEPtrPDZKJkVG9ZbQ.roa
Signing time:             Mon 02 Jan 2023 06:54:49 +0000
ROA not before:           Mon 02 Jan 2023 06:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     53107
IP address blocks:        77.83.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:ee:a7:07:08:fd:9b:41:9e:02:b8:d6:22:c9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=256ad1972ea4a8a7043edacf0d92899151bd65b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:9a:1f:43:d4:dd:0c:70:21:fe:b4:6a:c0:
                    7f:13:75:bd:44:69:4b:08:99:a6:8b:ba:fc:68:67:
                    87:d6:3b:a3:c5:d5:6c:18:5a:22:f0:1b:3d:f2:7a:
                    0e:b9:29:38:74:bf:6c:5c:dd:9b:19:02:cb:f6:82:
                    11:fc:3a:a6:f6:2c:67:5a:b4:7c:69:f8:dd:71:73:
                    53:2f:b8:fb:b7:11:e3:37:d9:d6:04:96:5a:9c:92:
                    e1:b6:a3:a1:1f:6a:fa:9c:b9:a8:8c:13:45:32:df:
                    fe:db:a0:91:8e:4a:88:91:3b:40:53:5f:80:85:e6:
                    07:c5:f2:3e:17:9b:14:63:06:6a:8f:81:a1:4d:2e:
                    90:8b:86:e6:9b:ba:9b:f1:ac:4e:7e:c5:97:67:b4:
                    a1:51:3e:24:cd:c2:5a:86:15:07:f7:df:64:aa:0f:
                    c0:a4:aa:37:55:0b:32:57:01:8c:ea:71:31:11:dc:
                    27:d7:3b:f2:bd:b9:db:84:a7:95:d7:49:51:87:74:
                    8e:ba:6d:a9:7c:51:2b:27:20:31:a3:c3:ba:5d:8f:
                    f6:e1:7d:71:eb:b2:65:d5:5c:98:c2:a4:a9:18:13:
                    b1:09:de:3d:73:83:a1:e3:77:ce:68:5a:1a:63:0f:
                    74:6f:9a:0f:32:93:ef:f1:e7:be:fc:08:39:d7:70:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6A:D1:97:2E:A4:A8:A7:04:3E:DA:CF:0D:92:89:91:51:BD:65:B4
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/JWrRly6kqKcEPtrPDZKJkVG9ZbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:55:57:d4:04:22:29:78:4d:9e:ae:be:a4:f2:7e:ab:cf:d7:
         5d:0d:dd:d8:7f:52:cb:c6:20:a4:8c:ab:7b:b4:4b:50:05:9d:
         df:3b:94:89:e7:40:d3:6f:f9:9b:33:35:b0:86:83:18:f8:9d:
         18:2f:a0:d5:4f:4d:b0:00:a0:41:19:e6:3a:59:3f:a2:34:13:
         fc:9e:c8:a1:18:c5:68:7e:bf:53:5c:ca:cf:54:3d:b3:db:c1:
         54:6b:27:af:c5:9b:3e:c8:82:c2:85:9e:8e:0d:a4:bc:03:e4:
         fd:15:c9:56:53:71:c4:89:6f:44:2a:b6:33:fb:d1:21:cc:19:
         95:55:da:3d:02:06:62:74:c1:c3:31:f7:b3:cf:ad:2c:01:4c:
         33:71:c8:f4:a4:ba:37:72:32:4c:9b:cf:b0:03:15:a2:c2:a1:
         3d:fb:6b:6d:c7:1a:4e:f4:8b:e8:f2:b4:0d:a3:8e:bd:57:83:
         2a:2c:80:56:74:c8:10:0c:ea:6e:01:73:63:52:fd:1f:d5:a7:
         d0:7b:89:5b:50:f5:d8:87:13:f5:a2:e1:b9:cb:e4:f7:ed:be:
         2c:db:ee:f9:79:b5:c4:60:94:8d:0b:b5:a3:fa:a5:ee:29:49:
         2f:c7:d8:ae:d9:09:02:3d:61:77:88:b0:5d:a5:1c:4b:68:80:
         a9:e3:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:15 2023 by rpki-client on console-ams.rpki-client.org